Apparatus, system and method for data collection, import and modeling

ABSTRACT

A method for data analysis of a backup system, including interrogating a plurality of computer systems to generate for each computer system at least one dump file, each dump file including configuration and state information; extracting predetermined configuration and state information from the respective dump files; and storing the extracted configuration and state information in a database in a normalized format.

BACKGROUND Field of the Invention

The present invention relates to an apparatus, system and method forcollecting, importing and modeling data, in particular data stored in avariety of computer systems.

Background of Invention

Organizations are running ever more sophisticated computer systems. Forexample, a small business with only 30 employees located at a singlesite may run one or two networks, with a single server. Employees mayhave different workstations or computers, manufactured by different OEMsand using different operating systems. The types of data created andmanipulated by different employees will vary depending on their role,and the software they use.

As the requirements of IT systems grow organically, so the number ofworkstations, networks, servers and storage devices increases. Moreover,there is increasing variation in the OEM product and IT systems usedwithin an organization. In larger organizations with thousands ofemployees spread across many sites, there is considerable variation inhardware and software both within and between the sites. Moreover, dataretention and protection policies may vary between sites and betweendepartments within (or between) sites. Accordingly, it is becomingincreasingly difficult to manage data, especially within largerorganizations and to ensure that data is most efficiently andcost-effectively stored, with maximum control and minimum access times.It is also difficult to manage the transfer of data from legacy hardwareto replacement equipment as the IT infrastructure is refreshed.

Typically, all (or at least all important) information stored by anorganization is backed up overnight or at other regular intervals. Thereare two primary reasons for backing up data. The first is to recoverdata after loss. The second is to allow recovery of data from an earliertime according to a user-defined retention policy. Accordingly, backedup data will commonly be given an expiry date setting the time for whichthe copy of the backed up data should be kept.

Since at least one copy must be made of all data on a computer systemthat is worth saving, storage requirements can be very large and back upsystems can be very complicated. To add to the complexity, there aremany different types of storage data that are useful for making backups, many different back up models, many different access types and manydifferent providers of back up solutions.

Briefly, back ups can be unstructured, which are generally file systemtype back ups, with a copy of data made on a medium or series of mediawith minimal information about what was backed up and when, anstructured, which generally use product specific formats such as SQL,Oracle and BD2.

Irrespective of whether structured or unstructured, back ups may be:full, in which complete system images are made at various points intime; incremental, in which data is organized into increments of changebetween different points in time; reverse delta, in which a mirror ofthe recent source data is kept together with a series of differencesbetween the recent mirror and earlier states; and continuous, in whichall changes to data are immediately stored.

In addition, various media can be used for storing data, includingmagnetic tapes, hard disk, optical storage, floppy disk and solid statestorage. Typically, an enterprise will hold its own back up mediadevices, but remote back up services are becoming more common.

To add a further layer of complexity, back up may be: on-line, in whichan internal hard disk or disk array is used; near-line, such as a tapelibrary with a mechanical device to move media units from storage to adrive where the media can be read/written; off-line, in which directhuman action is required to make access to the storage media physicallypossible; off-site; or at a disaster recovery centre.

Moreover, the different back up providers use proprietary systems fororganizing back ups. These systems can handle the copying or partialcopying of files differently; and they can copy file systemsdifferently, for example by taking a file system dump or byinterrogating an archive bit or by using a versioning file system. Theymay also handle the back up of live data in different ways. In additionto copying file data, back up systems will commonly make a copy of themetadata of a computer system, such as a system description, bootsector, partition layout, file metadata (file permissions, owner, groupetc), and system metadata (as different operating systems have differentways of storing configuration information).

In addition, the different back up providers frequently manipulate thedata being backed up to optimize the back up speed, the restore speed,data security, media usage and bandwidth requirements. Such manipulationmay involve compression, duplication and reduplication, encryption,multiplexing, refactoring and staging, and varies between the differentproducts and different vendors.

It will be apparent that when a number of different back up systems areused, it can be very difficult to properly manage data. Similar orgreater degrees of complexity arise in computer systems in the primarystorage layer, which acts as the source of data to be backed up by backup systems.

SUMMARY

Accordingly, it is an object of the present invention to provide anapparatus, system and method to simplify the management of data acrosscomputer systems.

According to a first aspect of the present invention, there is providedA method of data analysis, including: interrogating a plurality ofcomputer systems to generate for each computer system at least one dumpfile, each dump file including configuration and state information;extracting predetermined configuration and state information from therespective dump files; and storing the extracted configuration and stateinformation in a database in a normalized format.

Preferably, the method further includes transforming the predeterminedconfiguration and state information to the normalized format from aformat that is at least one of vendor and product specific.

Preferably, the interrogating includes using a collector tool to queryeach computer system using the computer system's native interface.

Preferably, at least one said native interface includes a standardcommand line interface and the respective collector tool is adapted torun a predetermined series of commands.

More preferably, the collector tool is adapted to generate the dump fileby collating responses by the computer system to the predeterminedseries of commands.

In these cases, the method preferably further includes providingdifferent collector tools for different computer system environments.

Preferably, the extracting and storing includes using an importer tool,said importer tool being arranged to extract the predeterminedconfiguration and state information from the dump files, transform theextracted information into the normalized format and store thetransformed information in the normalized format in the database.

Here, the method preferably further includes providing a differentimporter tool for each collector tool.

Preferably, each said computer system is at least one of a back-upcomputer system, a primary storage layer computer system and anapplication layer computer system.

Preferably, the configuration and state information relates to aplurality of objects and includes metadata about the objects stored onthe plurality of computer systems.

More preferably, the metadata describes the physical storage location ofeach object.

Preferably, the metadata for each object includes at least one ofcustomer data, site data, source data, node data, object data andfragment data.

In this case, it is preferred that the object data includes at least oneof time of creation, size, number of files and expiry date.

Preferably, the fragment data describes the physical location of theobject on at least one storage medium.

Preferably, the plurality of computer systems are geographicallydispersed.

Preferably, the plurality of computer systems use at least two differentproprietary data formats.

Preferably, the computer systems store data on at least two differenttypes of storage media.

According to another aspect of the present invention, there is provideda data repository including: a storage device storing in a normalizedformat an index of data stored on a plurality of computer systems,whereby the configuration and state details of each computer system canbe determined.

Preferably, each said computer system is at least one of a back-upcomputer system, a primary storage layer computer system and anapplication layer computer system.

Preferably, the data includes a plurality of objects and the indexincludes metadata about the objects stored on the plurality of computersystems.

In this case, it is preferred that the metadata describes the physicalstorage location of each object.

It is also preferred that the metadata for each object includes at leastone of customer data, site data, source data, node data, object data andfragment data.

It is more preferred that the object data includes at least one of timeof creation, size, number of files and expiry date.

It is also more preferred that the fragment data describes the physicallocation of the object on at least one storage medium.

Preferably, the plurality of computer systems are geographicallydispersed.

Preferably, the computer systems store data on at least two differenttypes of storage media.

According to a further aspect of the present invention, there isprovided a data system, including: a data repository as described above;and an importer, wherein the importer is arranged to extractpredetermined configuration and state information generated from aplurality of computer systems, translate the extracted information intothe normalized format and store the transformed information in thenormalized format in the index.

Preferably the system includes at least one collector arranged tointerrogate a said computer system to generate configuration and stateinformation of the computer system, said generated configuration andstate information being in a format native to the computer system.

More preferably, the collector is arranged to query the computer systemusing the computer system's native interface.

Yet more preferably, the native interface includes a standard commandline interface and the collector is adapted to run a predeterminedseries of commands.

It is further preferable that the collector is adapted to generate adump file by collating responses by the computer system to thepredetermined series of commands.

Preferably, the system further includes different collectors fordifferent computer system environments.

Preferably, the system further includes a different importer for eachcollector.

Preferably, the system further includes the plurality of computersystems.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

The following detailed description, given by way of example and notintended to limit the invention solely thereto, will best be appreciatedin conjunction with the accompanying drawings, in which:

FIG. 1 is a schematic representation of a plurality of back up systems;

FIG. 2 is a schematic representation of a system and method according tothe present invention applied to a single computer system;

FIG. 3 is schematic representation of a system and method according tothe present invention applied to a plurality of computer systems;

FIG. 4 is schematic representation of another system according to thepresent invention;

FIG. 5 is a schematic representation of a system and method according toa further aspect of the present invention;

FIG. 6 is a flowchart illustrating a method according to the presentinvention; and

FIG. 7 illustrates an exemplary embodiment of a computer system 1100that may be used in various elements of the present invention.

The drawings are not necessarily to scale. The drawings are merelyschematic representations, not intended to portray specific parametersof the invention. The drawings are intended to depict only typicalembodiments of the invention. In the drawings, like numbering representslike elements.

DETAILED DESCRIPTION

Detailed embodiments of the claimed structures and methods are disclosedherein; however, it can be understood that the disclosed embodiments aremerely illustrative of the claimed structures and methods that may beembodied in various forms. This invention may, however, be embodied inmany different forms and should not be construed as limited to theexemplary embodiments set forth herein. Rather, these exemplaryembodiments are provided so that this disclosure will be thorough andcomplete and will fully convey the scope of this invention to thoseskilled in the art. In the description, details of well-known featuresand techniques may be omitted to avoid unnecessarily obscuring thepresented embodiments.

FIG. 1 schematically shows the back up storage layer 100 of an exemplaryorganization, which may be termed customer 1. As shown in the figure,the organization operates three different computer back up systems 10,20, 30, each being an example of a computer system within the meaning ofthe present specification. In this example, each back up system 10, 20,30 is provided at a different site, although it is possible for two ormore systems to be provided at the same site or for two or more sites tobe backed up using one system.

Each back up system 10, 20, 30 includes a back up server 40, 45 andstorage media 50, 55. In particular, the back up server 40, 45 isresponsible for managing the back up operation of data from a respectivesource 152, 154, 156 in a primary storage layer 150. Thus, the sources152, 154, 156 act as data sources for the back up and may includeservers, and laptop and desktop computers, for example. The back upservers 40, 45 back up the data from the primary storage layer 150 tothe storage media 50, 55. In this example, systems 10 and 20 use aproprietary back up server 40 provided by as product X by a particularvendor and system 30 uses a different proprietary back up server 45provided as product Y by a different vendor (although different vendorscan of course produce different products, which may or may not becompatible with one another). The back up server 40, 45 is implementedin software or hardware or both.

FIG. 7 illustrates an exemplary computer architecture 1100 by which theback up server 40, 45 may be implemented. Computer architecture 1100 maybe or form part of a desktop computer or a laptop computer, a serverwithin the primary storage layer, or any similar computer device, butthe back up server 40, 45 is preferably implemented as a stand aloneserver.

The computer architecture 1100 may interface to external devices such asthe storage media 50, 55 and the primary storage layer 150 through amodem or network interface 1102, such as an analogue modem, ISDN modem,cable modem, token ring interface, or satellite transmission interface.As shown in FIG. 7, the computer architecture 1100 includes a processingunit 1104, which may be a conventional microprocessor, such as an IntelPentium microprocessor, an Intel Core Duo microprocessor, or a MotorolaPower PC microprocessor, which are known to one of ordinary skill in thecomputer art. System memory 1106 is coupled to the processing unit 1104by a system bus 1108. System memory 1106 may be a DRAM, RAM, static RAM(SRAM) or any combination thereof. Bus 1108 couples processing unit 1104to system memory 1106, to nonvolatile storage 1110, to graphicssubsystem 1112 and to input/output (I/O) controller 1114. Graphicssubsystem 1112 controls a display device 1116, such as a liquid crystaldisplay, which may be part of the graphics subsystem 1112. The I/Odevices 1118 may include one or more of a keyboard, disk drives,printers, a mouse, a touch screen and the like as known to one ofordinary skill in the computer art.

The back up server 40, 45 control software will normally be stored onthe non-volatile storage 1110. Thus, it may be stored on the machine'shard drive, or possibly on an externally connectable storage medium,such as a USB memory stick or a CD. These two devices would thenconstitute part of the I/O devices shown as item 1118 in FIG. 7. Thenon-volatile storage may also store indexing data created by the back upserver 40, 45 discussed below.

Back up systems 10 and 30 use tape storage media 50 provided at theirrespective sites, whereas system 20 uses disc storage media 55 providedat its respective site. Each of the back up servers 40, 45 will schedulethe back up data from the source location(s) and will store the data inthe manner particular to respective vendor or the respective vendor'sproduct, including manipulation of the backed up data. In particular,each back up server 40, 45 will store an index of the data backed up ina format specific to the respective product. The formats varysignificantly between vendors, who use different names for similarconcepts and also store data and record the storing of data in differentways. The type of information stored in the indexes may also varydepending on the type of physical media. Thus, since systems 10 and 20use different types of storage media 50 and 55, the type of informationstored in the index of back up server 40 in system 10 may vary from thetype of information stored in the index of back up server 40 of system20, even though they are the same product.

Accordingly, it is very difficult to understand and compare what data isbacked up on each of the three back up systems 10, 20 and 30 in thesimple arrangement shown in FIG. 1. This can make it very difficult todetermine how best the systems can be improved and how best to accessdata between back up systems.

To obviate these difficulties, the present invention provides a methodand system including a database and tools to collect, store and provideanalyses of the configuration and state details of a large number ofdisparate and geographically dispersed computer systems in a consistentand scalable manner.

In the present embodiment, as shown in FIG. 2, the system 200 of theinvention includes a database or index 210 which stores information onthe configuration and state of the back up system 10 shown in FIG. 1.The database 210 is populated by running by a collection tool orcollector 220, which interrogates the back up system 10 through thesystems' native interfaces, such as the standard command line interfaceof the proprietary back up server 40. In particular, the collector 220runs a series of commands (queries) and receives as a result of thesecommands information from the back up system 10 in the product specificformat and configuration. The collector 220 generates dump files 225,which contain the product specific configuration and state information.

The dump files 225 are then processed using importers 230 specificallyprovided to extract predetermined system configuration and stateinformation deemed important to underpin the required subsequentanalysis.

The extracted configuration and state information is translated by theimporter 230 from its vendor and product specific format into aninternal normalized format (data model) before being stored in thedatabase 210.

The internal normalized format (data model) contains all the necessarydata points for subsequent analysis in a normalized and consistentmanner independent of the mix of vendors' products being analyzed andany products' idiosyncrasies or different ways of expressing itsconfiguration and state.

The database 210 may be stored and accessed using any suitable knownmeans. For example, it may be stored on a server, for example on a harddrive or an array of hard drives. The database server or other storagedevice may have the same architecture as that shown in FIG. 7.Alternatively, it may distributed and stored across a number ofdifferent servers at the same or geographically dispersed locations. Thedatabase may be stored on the RAM 1106 or the non-volatile storage 1110of the server having the architecture shown in FIG. 7.

The collector 220 may be implemented in hardware, in software or in acombination of hardware and software. Preferably, it is implemented inthe form of software either stored on an optical or magnetic medium, ordownloaded over a network, such as the Internet. The collector 220 maybe implemented on the hardware of the database 210 or separate hardware.More preferably, it is loaded on a ROM 1110 and implemented in RAM 1106of the back up server 40, 45. In particular, it may be called by themicroprocessor 1104 of the back up server 40, 45 at predetermined times,or on a one off basis. Each collector 220 is adapted to operate with aparticular back up server 40, 45. Accordingly, different collectors 220are provided for the different back up servers 40, 45, although inalternative embodiments different collectors 220 are provided fordifferent systems 10, 20, 30, or a single collector 220 may be adaptedto operate on two or more systems 10, 20, 30 or two or more back upservers 40, 45. In a further alternative, two or more collectors 220 maybe provided for a back up server 40, 45.

Similarly, the importer 230 may be implemented in hardware, in softwareor in a combination of hardware and software. Preferably, it isimplemented in the form of software either stored on an optical ormagnetic medium, or downloaded over a network, such as the Internet. Theimporter 230 may be stored on the ROM 1110 and implemented in the RAM1106 of the back up server 40, 45 or more preferably of the hardware onwhich the database 210 is stored, or it may be implemented in separatehardware. The importer 230 communicates with the collector 220 and thehardware storing the database 210 by any suitable means, including adirect connection, or over a network such as the Internet. Each importer230 is adapted to operate with a particular collector 220. Accordingly,different importers 230 are provided for different collectors 220,although in alternative embodiments a single importer 230 may be adaptedto operate with two or more collectors 220, or two or more importers 230may be adapted to operate with one collector 220.

The process of this embodiment of the present invention is illustratedin FIG. 6. As shown in step S1, the back up system 10, 20, 30 isinterrogated using the collector 220. In particular, using the standardcommand line interface particular to the respective back up server 40,45, the collector 220 inputs a series of standard commands understood bythe back up server 40, 45. In response to the commands, the back upsystem 10, 20, 30 (back up server 40, 45) outputs configuration andstate information in the format particular to the source 10, 20, 30(back up server 40, 45). The collector 220 uses the output configurationand state information to generate one or more dump files 225 in step S2,which are passed to and received by (or fetched by) the importer 230.The configuration and state information in the dump files are in theformat of used by the back up system 10, 20, 30. In this embodiment, thedump files are in the format used by the back up server 40, 45.

In step S3, the importer 230 extracts predetermined configuration andstate information from the dump files 225. The importer 230 is adaptedto understand or work with the format of the dump file and so is able tosearch for and extract the predetermined information in that format.Once extracted, the importer 230 is adapted to translate the format ofthe extracted data in step S4 to the normalized format used in thedatabase 210 of the present invention.

Finally, in step S5 the importer 230 stores the normalized configurationand state information in the database 210.

It should be appreciated that steps S3 and S4 can be reversed, so thatall the data in the dump files 225 is first translated into thenormalized format, and the predetermined data is then extracted andstored. However, it is generally more efficient to carry data extractionout first.

The normalized format is a data model adapted to store specificconfiguration and state data for the back up system 10, 20, 30. Inparticular, the normalised format includes information about the datastored on the media 50, 55 irrespective of the type of media andirrespective of the product type of the back up server 40, 45. Theinformation included in the normalized format includes all informationrequired to carry out data analysis for which the embodiment of thepresent invention is designed.

FIG. 3 shows how the invention can be applied to a plurality of sources.Thus, FIG. 3 shows that customer 1 uses three computer systems 10, 20,30 using products X, X and Y respectively as in FIG. 1; customer 2 usesthree different computer systems 10′, 20′, 30′ using products X, Y and Yrespectively; and customer 3 uses a further three different computersystems 10″, 20″, 30″ using products X, Z and Z respectively. In thisembodiment, each computer system is a back up system, but may be acomputer system 152, 154, 156 in the primary storage layer 150 in otherembodiments, as discussed below.

A collector 220 interrogates each of the computer systems 10, 20, 30,10′, 20′, 30′, 10″, 20″, 30″ and generates one or more dump files 225for each. A different type of collector 220 is provided for each ofproducts X, Y and Z. An importer 230 then operates on each of the dumpfiles to extract the required information, to translate it into thenormalized format data and store it in the database 210. Thus,configuration and state information for all 9 computer systems 10, 20,30, 10′, 20′, 30′, 10″, 20″, 30′ is stored in the database 210 in anormalized format. The data stored in the database 210 can therefore beanalyzed irrespective of the environment (media types and the producttype) of the various sources.

The normalized format allows information to be stored about each item ofdata originating from a source in view of the data hierarchy, as well ashow and where the data is stored in the back up system. The datahierarchy includes which customer owns the data; which of the sitesoperated by the customer the data originates from; and which of themultiple source environments associated with a site the data is createdin. The source environments may, for example, be different operatingsystems. Each source environment backs up multiple nodes, where thenodes may include, for example, clients such as different servers ordifferent workstations. Moreover, each source environment contains backup objects.

Each object is created when a back up is run and is associated with anode. Each object has at least one copy but can have multiple copies.Each copy is stored on one or a number of fragments, and each fragmentis stored on a piece of media, such as a physical tape, a virtual tapeor a disk. There may be multiple fragments, for example, where twocopies of the object are made, where one object is written in series butsplit between tapes due to space constraints or where different parts ofthe object are written to different media in parallel. Media relating toa physical tape can either be offline, near-line in a library, or in astand-alone drive. Media relating to a virtual tape will always be in alibrary. There are also a number of other factors in the data hierarchythat may be considered and are known to those skilled in the art.

From the foregoing, it will be apparent that the predetermined datainclude in the data model may include as non-limiting examples anidentification (ID) of the customer, a customer site ID, sourceinformation, node information, back up object information, and fragmentinformation.

Where the system is used for a number of clients, the customeridentification allows index data to be stored for a plurality ofdifferent clients in the same database 210. The customer site ID may beused to distinguish between different sites at which the customeroperates. The source and node information will provide information aboutthe source and the node associated with objects backed up by therespective back up systems 10, 20, 30. The object information mayinclude back up date, size, number of files, data type (filesystem/Oracle/SQL/Exchange etc), backup type (full/incremental etc),expiry date etc. The back up objects are mapped to fragments, which arein turn mapped to the physical storage media. In addition, the datamodel preferably includes, and database 210 stores, information relatingto the back up systems 10, 20, 30 themselves and the back up servers 40,45.

FIG. 4 is an alternative, exemplary arrangement according to the presentinvention. In the arrangement of FIG. 4, there are provided a pluralityof distinct layers, namely a media layer 400, a back up server layer300, and database layer 200. The arrangement 14 is owned by a largeentity organization. The back up system layer includes four back upservers 310, 320, 330, 340 each using different proprietary back upsystems—in this example, EMC2®, Tivoli®, HP®, and Symantec® back upsystems. It should be appreciated that these systems are exemplary onlyand other systems could be used in their place. Each back up server 310,320, 330, 340 backs data up data from a primary storage layer 150 (notshown) to a common media layer 400, which includes a plurality oflibraries 410. Each library 410 includes a number of tape or other mediadrives 420 and a number of tapes 430 or other physical media. Theloading and unloading of tapes 430 into the drives 420 of a library 410is automated.

Each back up server 310, 320, 330, 340 is adapted to write to and readfrom one or more libraries and stores an index in proprietary format ofthe data it has stored in a library or the libraries 410. Usingrespective collectors 220 and importers 230 adapted to interrogate theproprietary back up systems 310, 320, 330, 340, extract predetermineddata from them, and translate the extracted data into a normalizedformat, an index of the data in each of the indexes is created andstored in a normalized format in the database layer 200.

It should be recognized that the data stored in the media 400 is notitself stored in the database 210. Rather, the database 210 stores anindex of indexes in a normalized format. Thus, in a real worldsituation, the database layer may index the data of 300 differentcustomers, providing an index of only several hundred GB in size foraround 1 exabyte (10¹⁸) of data.

Using the normalized state and configuration data stored in the database210, it becomes possible to carry out powerful analysis of the datastored in the media layer 400, as well as the effectiveness andefficiency of the various back up servers 310, 320, 330, 340 in the backup layer 300. In effect, the normalized data stored in the databaselayer 200 allows the skilled addressee to establish what components arein the back up system 300, 400, how it works, how data is stored in it,how efficiently data is stored in it, what its total capacity andremaining capacity are, and what it costs.

For example, it becomes possible to analyze existing environments in acustomer system and provide a detailed analysis of various factors.These may include, as non-limiting examples, existing hardwareinfrastructure (media libraries, servers, drives; vendors and models;quantities; locations; and so on); storage capacity in total and brokendown into various sites, libraries etc; the amount of data stored andthe types of data (for example, Windows®, Oracle®, SAP® and so on); costof ownership and running; power usage and so forth. This analysisfurther allows accurate projections to be made of future systemrequirements and the justification of infrastructure refresh andreplacement projects. For example, various key performance indicatorsmay be established for each of several alternative technologies, inorder to allow the modeling of different workloads on the differenttechnologies. In this way it is possible to provide variousmathematically calculated, sized and priced solutions based on thenormalized data stored in the database 210 demonstrating what savings instorage space and expenditure can be established if various differenttechnologies are adopted.

The configuration and state information stored in a normalized format inthe database 210 may further be used to control and optimize theexecution of infrastructure migration projects, for example as legacyback up systems are replaced and the backed up data is migrated acrossto new back up systems. The normalized information also allows theongoing monitoring of computer infrastructure against service leveltargets.

Although the present invention has so far been described with referenceto back up systems, it should be appreciated that it is not limited tothem. As shown in FIG. 5, a customer will have various layers within itsIT architecture. These include a raw data layer 710, an applicationlayer 720, a primary storage layer 150 and a data protection layer 100.The back up systems 10, 20, 30; 300, 400 shown in the figures discussedabove fall within the data protection layer 100.

As FIG. 5 shows, collectors 220 and importers 230 may be used tointerrogate the data protection layer 100 in the manner discussed aboveto develop a normalized index of the data stored in the data protectionlayer 100 irrespective of the back up system product or vendor.

Alternatively, collectors 220 may interrogate the primary storage layer150, which acts as the source for the back up layer 100. The primarystorage layer may include servers, desktops and laptops, which may besplit across various sites, and use hardware and software from differentvendors and having different formats. Thus, the primary storage layer150 may have a significant degree of complexity, usually comparable toor greater than that of the data protection (back up) layer 100. Thecollectors 220 interrogate the primary storage layer 150 in the same wayas described above for the data protection layer 100, and differentcollectors 220 may be provided for different vendor and/or productspecific hardware and software within the primary storage layer 150. Inthe same way as before, the collectors 220 generate dump files 225 andimporters 230 operate on the dump files to extract predeterminedindexing data, translate the extracted data into the normalized formatand store it in the database 210.

In the same way as for the data protection layer 100, the normalizeddata extracted for the primary storage layer makes it possible toanalyze existing primary storage layer environments in a customer systemand provide a detailed analysis of various factors such as existinghardware infrastructure (servers, desktops, laptops; vendors and models;quantities; locations; and so on); storage capacity in total and brokendown into various sites, clients etc; the amount of data stored and thetypes of data (for example, Windows®, Oracle®, SAP® and so on); cost ofownership and running; system speeds and access times; power usage andso forth. This analysis further allows accurate projections to be madeof future system requirements and the justification of infrastructurerefresh and replacement projects. The configuration and stateinformation stored in a normalized format in the database 210 mayfurther be used to control and optimize the execution of infrastructuremigration projects, for example as legacy primary storage layer systemsare replaced and the data stored in them is migrated across to newprimary storage layer systems. The normalized information also allowsthe ongoing monitoring of primary storage layer computer infrastructureagainst service level targets.

Collectors 220 and importers 230 may also be used to interrogate theapplication layer 720 and store normalized indexing data in the database210—that is, the present invention may also interrogate the data held orused by various applications accessing the primary storage layer 150. Asan example, the collectors may be used to establish which data is usedby which applications. Again, the collectors 220 and importers 230 maybe specific to one or more applications.

Thus, the present invention may be used to establish normalized indexingdata of the data stored in any one or more of the application layer 720,primary storage layer 150 and data protection layer 100. Takenseparately, powerful analysis may be made of the components in eachlayer and their efficiency and effectiveness. However, when data on twoor more layers is combined, yet more powerful analysis may be carriedout. For example, it becomes possible to track where one email inOutlook is used and stored throughout the application, primary storagelayer and data protection layer stack.

This may lead to further efficiencies and costs savings. For example,the analysis may allow improvements in data management systems so thatit is possible to improve data access times to different and oftenconflicting clients and remove bottlenecks, to manage the transfer ofdata within and between sites, to justify refreshing and replacinghardware, to reduce costs and so on.

The descriptions of the various embodiments of the present inventionhave been presented for purposes of illustration, but are not intendedto be exhaustive or limited to the embodiments disclosed. Manymodifications and variations will be apparent to those of ordinary skillin the art without departing from the scope and spirit of the describedembodiments. The terminology used herein was chosen to best explain theprinciples of the embodiment, the practical application or technicalimprovement over technologies found in the marketplace, or to enableothers of ordinary skill in the art to understand the embodimentsdisclosed herein.

What is claimed is:
 1. A non-transitory computer program product fordata analysis of a backup system, the computer program productcomprising: one or more computer-readable storage media and programinstructions stored on the one or more computer-readable storage media,the program instructions comprising: program instructions to extractpredetermined configuration and state information from respective dumpfiles of a plurality of different computer systems, the predeterminedconfiguration and state information is in different native formats basedon the respective dump file from which it was extracted; programinstructions to translate the predetermined configuration and stateinformation from a native format used by each of the plurality ofdifferent computer systems into a normalized format, wherein thetranslated configuration and state information comprises configurationand state information irrespective of which of the plurality ofdifferent computer systems from which it was generated; and programinstructions to determine what components are in the backup system, howthe backup system works, how data is stored in the backup system, howefficiently data is stored in the backup system, a total capacity of thebackup system, a remaining capacity of the backup system, and anoperating cost of the backup system by analyzing the normalizedpredetermined configuration and state information.
 2. The computerprogram product according to claim 1, wherein the native format used byeach of the plurality of different computer systems is a vendor specificdata format or a product specific data format.
 3. The computer programproduct according to claim 1, wherein each of the plurality of differentcomputer systems is at least one of a backup computer system, a primarystorage layer computer system and an application layer computer system.4. The computer program product of claim 1, wherein the plurality ofcomputer systems store data on at least two different types of storagemedia.
 5. The computer program product according to claim 1, wherein theplurality of different computer systems use at least two differentproprietary data formats.
 6. The computer program product according toclaim 1, wherein the plurality of computer systems are geographicallydispersed.
 7. The computer program product according to claim 1, whereinthe configuration and state information relates to a plurality ofobjects stored on the plurality of different computer systems andcomprises metadata about the plurality of objects.
 8. A non-transitorycomputer program product for data analysis of a backup system, thecomputer program product comprising: one or more computer-readablestorage media and program instructions stored on the one or morecomputer-readable storage media, the program instructions comprising:program instructions to generate a dump file for each of a plurality ofdifferent computer systems, each dump file comprising configuration andstate information about each of the plurality of different computersystems in a native format used by each of the plurality of differentcomputer systems on which data is stored; program instructions toextract the configuration and state information from the respective dumpfiles of the plurality of different computer systems, the configurationand state information being in different native formats based on thedump file from which it was extracted; program instructions to translatethe configuration and state information from the native format used byeach of the plurality of different computer systems into a normalizedformat, wherein the translated configuration and state informationcomprises configuration and state information irrespective of which ofthe plurality of different computer systems from which it was generated;and program instructions to analyze the normalized configuration andstate information to determine what components are in the backup system,how the backup system works, how data is stored in the backup system,how efficiently data is stored in the backup system, a total capacity ofthe backup system, a remaining capacity of the backup system, and anoperating cost of the backup system.
 9. The computer program productaccording to claim 8, wherein the native format used by each of theplurality of different computer systems is a vendor specific data formator a product specific data format.
 10. The computer program productaccording to claim 8, wherein each of the plurality of differentcomputer systems is at least one of a backup computer system, a primarystorage layer computer system and an application layer computer system.11. The computer program product according to claim 8, wherein theplurality of computer systems store data on at least two different typesof storage media.
 12. The computer program product according to claim 8,wherein the plurality of different computer systems use at least twodifferent proprietary data formats.
 13. The computer program productaccording to claim 8, wherein the plurality of computer systems aregeographically dispersed.
 14. The computer program product according toclaim 8, wherein the configuration and state information relates to aplurality of objects stored on the plurality of different computersystems and comprises metadata about the plurality of objects.
 15. Anon-transitory computer program product for data analysis of a backupsystem, the computer program product comprising: one or morecomputer-readable storage media and program instructions stored on theone or more computer-readable storage media, the program instructionscomprising: program instructions to generate a dump file for each of aplurality of different computer systems, each dump file comprisingconfiguration and state information about each of the plurality ofdifferent computer systems in a native format used by each of theplurality of different computer systems on which data is stored; programinstructions to extract predetermined configuration and stateinformation from the respective dump files of the plurality of differentcomputer systems, the predetermined configuration and state informationbeing in different native formats based on the dump file from which itwas extracted; program instructions to translate the predeterminedconfiguration and state information from the native format used by eachof the plurality of different computer systems into a normalized format,wherein the translated configuration and state information comprisesconfiguration and state information irrespective of which of theplurality of different computer systems from which it was generated;program instructions to analyze the normalized predeterminedconfiguration and state information to determine a total capacity of thebackup system and a remaining capacity of the backup system; and programinstructions to project future system requirements of the backup systembased on analyzing the predetermined configuration and stateinformation.
 16. The computer program product according to claim 15,wherein the native format used by each of the plurality of differentcomputer systems is a vendor specific data format or a product specificdata format.
 17. The computer program product according to claim 15,wherein each of the plurality of different computer systems is at leastone of a backup computer system, a primary storage layer computer systemand an application layer computer system.
 18. The computer programproduct according to claim 15, wherein the plurality of computer systemsstore data on at least two different types of storage media.
 19. Thecomputer program product according to claim 15, wherein the plurality ofdifferent computer systems use at least two different proprietary dataformats.
 20. The computer program product according to claim 15, whereinthe plurality of computer systems are geographically dispersed.